> Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts used for the Insights feature. Chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain any tool call results. Beyond the words in the chat transcripts themselves, the data contained no information that could specifically identify the workspace, user, or company.

> As a precaution, we recommend that you treat this unattributable data as if it were exposed. If anyone on your team pasted sensitive information like passwords, API keys, or other credentials into Notion AI during this timeframe, we recommend rotating them right away.

Okay, so the actual impact is quite interesting: they did not notify you if they could not attribute the transcripts to you! You should really treat anything sensitive sent to Notion AI as compromised because they are not sure where these transcripts came from.

On Openrouter the Fireworks AI is labeled as ZDR.

> Private: this provider does not train on prompts and does not retain prompt data.

So how come notion discovered that they actually stored the data?

> Upon analysis of the new data, we discovered that it included unattributable Notion AI chat transcripts

So Fireworks is ZDR by default, yet Notion configured (asked) Fireworks to retain data? Otherwise, how is there anything to leak?

On the main fireworks breach page, they also say some customer weights of models and datasets to train them were leaked.

November is going to be the month with the most breaches on record (most will be from October given 30 day notification timelines).

That is for now, I am sure there will be worse months ahead of us.

Posted about it earlier today: https://news.ycombinator.com/item?id=50436636

but good that they finally got around to posting something official ...

I asked the CISO if they can tell me if the data was accessed but they aren't answering and any communication is super slippy like "may have been accessed". I need to do some GDPR notations bc of them but I won't start running around just bc it "may have been" accessed

The official announcements (original & update):

https://fireworks.ai/security/bulletins/october-2026-securit...

https://fireworks.ai/security/bulletins/october-2026-securit...

> “Unattributable” means the chats weren't labeled with who wrote them or which workspace they came from, and the transcripts did not contain tool call results. Beyond what’s in the chat transcript itself, there’s no information tying the chat back to a workspace, user, or company.

This is astonishing.

They’re saying “OTHER THAN THE ACTUAL CONTENTS OF YOUR CONVERSATION, NO INFORMATION WAS PRESENT”. That is not what unattributable really means and they’re trying to assert otherwise.

It’s trivial to identify the organisation or individuals involved in a conversation most of the time, but Notion are trying to make out that because the metadata wasn’t present, it’s no cause for concern.

That’s absolute bullshit and will give people a false sense of security. The contents of your conversation IS the critical information. Notion’s desktop app is very aggressive in prompting users to transcribe their calls and I imagine a large proportion do so by default. The potential for harm here is large.

I appreciate it’s Fireworks’ fault this happened, but Notion’s response destroys my confidence in them.

Does anyone actually use the AI features? $job switched off because they spent too much time on AI features we never used, and too little time making a text editor that wasn't painful to use

I run my coding agents on a PC at home, only reachable over Tailscale for this reason. It runs an opencode server with password. Currentlyt he blast radius from all 3rd party providers is so huge and scary.